feat: use allow list for rclone

[leafty]

Update rclone validation to use an allow list system:

• All storage types are listed and are explicitly allowed or blocked
• For all allowed storage types, all options are marked as allowed or blocked

This update also blocks potentially unsafe options (referring to a local file or a potential arbitrary command).

Tests in test/components/renku_data_services/storage/test_rclone.py are designed to help maintain the configuration of allowed storage types and storage options.

/deploy

[RenkuBot]

You can access the deployment of this PR at https://renku-ci-ds-1202.dev.renku.ch

[leafty]

NOTE: the new tests in this file can help maintainers update the list of allowed storage types and allowed storage options.

[coveralls]

Pull Request Test Coverage Report for Build 21900087723

Warning: This coverage report may be inaccurate.

This pull request's base commit is no longer the HEAD commit of its target branch. This means it includes changes from outside the original pull request, including, potentially, unrelated coverage changes.

• For more information on this, see Tracking coverage changes with pull request builds.
• To avoid this issue with future PRs, see these Recommended CI Configurations.
• For a quick fix, rebase this PR at GitHub. Your next report should be accurate.

Details

• 40 of 42 (95.24%) changed or added relevant lines in 4 files are covered.
• No unchanged relevant lines lost coverage.
• Overall first build on leafty/allow-list-rclone at 89.077%

---

Changes Missing Coverage	Covered Lines	Changed/Added Lines	%
components/renku_data_services/data_connectors/doi/schema_org.py	0	2	0.0%

Totals
Change from base Build 21623169484:	89.1%
Covered Lines:	23593
Relevant Lines:	26486

---

💛 - Coveralls

[RenkuBot]

Tearing down the temporary RenkuLab deployment for this PR.